NS4

Which statement describes a characteristic of automation stitches?

• They can run multiple actions simultaneously.
• They can be run only on devices in the Security Fabric.
• They can have one or more triggers
• They can be created on any device in the fabric.

What are two functions of ZTNA? (Choose two.)

• ZTNA manages access through the client only.
• ZTNA manages access for remote users only.
• ZTNA provides a security posture check.
• ZTNA provides role-based access.

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

• FortiGate uses fewer resources.
• FortiGate allocates two sessions per connection.
• FortiGate performs a more exhaustive inspection on traffic.
• FortiGate adds less latency to traffic.

Refer to the exhibits. The exhibits show a firewall policy (Exhibit A) and an antivirus profile (Exhibit B). Why Is the user unable to receive a block replacement message when downloading an Infected file for the first time?

• The volume of traffic being Inspected is too high for this model of FortIGate
• Flow-based Inspection is used, which resets the last packet to the user.
• The firewall policy performs a full content Inspection on the file
• The intrusion prevention security profile must be enabled when using flow-based inspection mode.

Which statement correctly describes the use of reliable logging on FortiGate?

• Reliable logging is enabled by default in all configuration scenarios.
• Reliable logging can be configured only using the CLI
• Reliable logging is required to encrypt the transmission of logs
• Reliable logging prevents the loss of logs when the local disk is full.

Refer to the exhibits Exhibit A shows a topology for a ForiiGate HA cluster that performs proxy-based inspection on traffic. Exhibit B shows the HA configuration and the partial output of the gee syst Based on the exhibits, which two statements about the traffic passing through the cluster are true? (Choose two.)

• For non-load balanced connections, packets forwarded by the cluster to the server contain the virtual MAC address of port2 as source
• For load balanced connections, the primary encapsulates TCP SYN packets before forwarding them to the secondary.
• The cluster can load balance ICMP connections to the secondary.
• The traffic sourced from the client and destined to the server Is sent to FGT-1.

Refer to the exhibits Based on the ZTNA tag, the security posture of the remote endpoint has changed. What will happen to endpoint active ZTNA sessions?

• They will be re-evaluated to match the security policy.
• They will be re-evaluated to match the endpoint policy.
• They will be re-evaluated to match the ZTNA policy.
• They will be re-evaluated to match the firewall policy.

Which three statements explain a flow-based antivirus profile? (Choose three.)

• FortiGate buffers the whole file but transmits to the client at the same time.
• Optimizes performance compared to proxy-based inspection.
• Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.
• The IPS engine handles the process as a standalone.
• If a virus is detected, the last packet is delivered to the client.

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

• The client FortiGate requires a manually added route to remote subnets.
• The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
• The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• The client FortiGate requires a client certiticate signed by the CA on the serve,FortiGate.

Refer to the exhibit. The exhibit shows the output of a diagnose command What does the output reveal about the policy route?

• It is an ISDB route in policy route.
• It is an SDWAN rule in policy route.
• It is an ISDB policy route with an SDWAN rule.
• It is a regular policy route.